libxml2 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libxml2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L XML External Entity (XXE) Injection	[,2.15.4)
H Integer Overflow or Wraparound	[,2.15.4)
L NULL Pointer Dereference	[,2.15.4)
C Out-of-bounds Write	[,2.15.4)
H Integer Overflow or Wraparound	[,2.15.4)
L Out-of-bounds Read	[,2.15.4)
H Buffer Overflow	[,2.15.4)
M NULL Pointer Dereference	[0,)
H Buffer Access with Incorrect Length Value	[,2.15.4)
L Buffer Overflow	[0,)
H Use After Free	[,2.11.3)
H Access of Resource Using Incompatible Type ('Type Confusion')	[,2.15.3)
M Missing Release of Memory after Effective Lifetime	[,2.15.2)
L Allocation of Resources Without Limits or Throttling	[,2.15.2)
M Uncontrolled Recursion	[,2.15.2)
H Uncontrolled Recursion	[,2.15.2)
M Buffer Overflow	[,2.14.5)
H Unchecked Input for Loop Condition	[,2.10.3)
H Out-of-bounds Read	[,2.14.5)
H Expired Pointer Dereference	[,2.14.5)
L Stack-based Buffer Overflow	[,2.14.5)
H Stack-based Buffer Overflow	[,2.14.5)
H Expired Pointer Dereference	[,2.14.5)
L Out-of-bounds Read	[,2.13.8)
L Buffer Under-read	[,2.13.8)
H Use After Free	[,2.13.6)
H Stack-based Buffer Overflow	[,2.13.6)
M NULL Pointer Dereference	[,2.13.6)
H Use After Free	[,2.11.3)
H XML External Entity (XXE) Injection	[2.11.3,2.11.9)[2.12.1,2.12.9)
H Heap-based Buffer Overflow	[,2.11.8)[2.12.1,2.12.7)
M Use After Free	[,2.11.7)[2.12.1,2.12.5)
M Use After Free	[,2.12.1)
M Buffer Overflow	[,2.12.1)
H Double Free	[,2.10.4)
M Improper Input Validation	[,2.10.4)
M Integer Overflow or Wraparound	[,2.10.3)
M Denial of Service (DoS)	[,2.10.3)
M Denial of Service (DoS)	[,2.9.12)
H Out-of-bounds Write	[,2.9.12)
M NULL Pointer Dereference	[,2.9.12)
H Use After Free	[,2.9.12)
H Memory Leak	[,2.9.10)
M Out-of-bounds Read	[,2.10.3)
H Denial of Service (DoS)	[,2.10.3)
H Memory Leak	[,2.10.3)
M Out-of-bounds Write	[,2.9.14)
H Use After Free	[,2.9.13)

Vulnerability

Vulnerable Version

XML External Entity (XXE) Injection

[,2.15.4)